Skip to content
Menu
IT-DRAFTS
  • About
  • My Statistics at Microsoft Q&A
  • Privacy policy
IT-DRAFTS

Month: July 2025

July 7, 2025

Baseline Wipeout: How Intune Just Nuked Its Own Security Promise

hi. welcome to 2024. where your cloud config tool auto-deletes your hardening policies… because someone didn’t design a merge engine. this isn’t a bug. it’s architecture. and now 48,000+ tenants are sitting on baseline vapor with no alert, no rollback, no visibility. ☠️ What happened? it started with the 23H2 → 24H2 security baseline schema…

Read More
July 4, 2025

Entra RBAC Just Got a Power-Up: Here’s What You Actually Need to Know

hi. Microsoft didn’t just tweak Entra RBAC—they dropped a load of new roles and tightened permissions, so you can lock down access without wrestling JSON or screaming at YAML. here’s the breakdown that matters. 🚀 June 2025: New Roles for New Demands Organizational Data Source AdministratorThis role lets you manage data source connections—perfect for big…

Read More
July 4, 2025

Azure Virtual Networks: Your Cloud’s Digital Skynet

hi. ever wondered what keeps your Azure machines whispering secrets to each other, talks to the internet, or talks back home to your HQ? that’s the role of Azure virtual networks (vnets) the core building block of Azure networking learn.microsoft.com+15azure.microsoft.com+15scholarhat.com+15tutorialsdojo.com. vnet is like your private LAN in the cloud, but with global backbone speed, scale,…

Read More
July 4, 2025

Ctrl+S to Compromise: FileFix Just Made MoTW Useless Again

hi. ever saved a web page?of course u did. Ctrl+S, “Webpage, Complete”, hit Enter, done.innocent?nope. welcome to FileFix.an exploit where saving a web page gives attackers the perfect entry — no exploits, no shellcode, just old-school HTML and Windows doing Windows things. FileFix: the ‘save as’ that opens Pandora’s browser the exploit comes from researcher…

Read More
July 2, 2025July 2, 2025

Phishing Without a Password: How Attackers Hijacked Microsoft 365’s Direct Send

hi. buckle up. we’re talking about emails that look like they came from your coworker, were sent through your own domain, and landed right inside your users’ inboxes… …without a single login, compromised account, or auth token.this ain’t magic. this is Microsoft 365 Direct Send — and it just got weaponized. what’s Direct Send anyway?…

Read More
July 1, 2025

Zero-Days and Zero Mercy: Inside Houken’s Multi-Tool Mayhem

hi. imagine waking up, grabbing coffee, checking logs… and seeing a kernel-mode rootkit silently hijacking your cloud edge device. welcome to Houken — a stealthy but sloppy intrusion set that smashed into French networks in late 2024, chaining zero-days, dropping reverse shells, and playing persistence like a damn violin. not some elite APT black-ops fantasy…

Read More
July 1, 2025

Size Me Up: Choosing the Right Azure VM Isn’t Guesswork Anymore %)

hi. choosing an Azure virtual machine size used to feel like ordering coffee at a hipster bar: too many letters, weird combos, and no idea what the difference between D-series and Esv5 even is. good news — Microsoft cleaned things up. now there’s a logic to the madness. and u can actually pick the right…

Read More
July 1, 2025

Sovereign Shift: Microsoft Just Rewrote the Cloud Playbook %)

hi. buckle up. Microsoft’s cloud isn’t just growing — it’s splitting into forms. like cloud Pokémon, but instead of types, it’s trust models. governments, enterprises, and AI freaks now get a tailored Azure — tuned for where the data lives, who runs it, and what it can’t do. let’s go layer by layer. 1. Sovereign…

Read More

Categories

ActiveDirectory AI Azure AzureAI azureidentity azureinfrastructure azurevirtualdesktop cloudnetworking CloudSecurity Copilot Cybersecurity DataProtection DataSecurity DevOps enterpriseai entraID Howto hybridcloud IncidentResponse Innovation insider licensing Microsoft Microsoft365 Microsoft AI MicrosoftAzure microsoftcloud microsoftentra MicrosoftOffice Microsoft Product OfficeSuite OWASP PrivacyRights ProductivityTools promptinjection sam Security SoftwareUpdate TechNews Technology updates Windows Windows10 Windows11 zeroTrust

Archives

  • July 2025
  • June 2025
  • May 2025
  • February 2025
  • October 2024
  • September 2024
  • July 2024
  • June 2024
  • May 2024
  • April 2024
  • March 2024
No comments to show.

Recent Comments

Recent Posts

  • Baseline Wipeout: How Intune Just Nuked Its Own Security Promise
  • Entra RBAC Just Got a Power-Up: Here’s What You Actually Need to Know
  • Azure Virtual Networks: Your Cloud’s Digital Skynet
  • Ctrl+S to Compromise: FileFix Just Made MoTW Useless Again
  • Phishing Without a Password: How Attackers Hijacked Microsoft 365’s Direct Send
©2025 IT-DRAFTS | Powered by WordPress and Superb Themes!